NetSight
IP …
medium6.5

CVE-2021-36740

Varnish Cache, with HTTP/2 enabled, allows request smuggling and VCL authorization bypass via a large Content-Length header for a POST request.

Impact

Varnish Cache, with HTTP/2 enabled, allows request smuggling and VCL authorization bypass via a large Content-Length header for a POST request. This affects Varnish Enterprise 6.0.x before 6.0.8r3, and Varnish Cache 5.x and 6.x before 6.5.2, 6.6.x before 6.6.1, and 6.0 LTS before 6.0.8.

Affected products

VendorProductAffected versions
Varnish-CacheVarnish Cache
from 6.0.0 before 6.0.8
Version 6.0.8
Varnish-SoftwareVarnish Cache
from 6.0.0 through 6.0.5
from 6.0.0 through 6.0.7
Varnish Cache ProjectVarnish Cache
from 5.0.0 through 5.2.1
from 6.1.0 through 6.6.0
FedoraprojectFedora
Versions 33, 34
DebianDebian Linux
Versions 10.0, 11.0

Weakness classification

CWE-444

References